Skip to content
Digital Life Check
Search

WhatsApp hacked? How to get your account back

If someone has taken over your WhatsApp, the only way to throw them out is to log back in with the 6-digit code sent to your phone number. Here is how, and what to do next.

Written by
Digital Life Check editorial team
Reviewed by
Not yet independently reviewed
Last checked

Do this now: open WhatsApp on your phone, tap Log back in, then Continue, and enter the 6-digit code WhatsApp sends to your number by text or phone call. WhatsApp says this logs everyone else out of your account. Don't share that code with anyone. Then warn your friends and family that messages sent from your account weren't from you.

Most WhatsApp takeovers start with a code. WhatsApp explains that someone trying to take over your account needs the verification code sent to your phone number, and without it they can't use your number on WhatsApp. If you passed on a code, even to someone who seemed to be a friend, that is usually how it happened. Our guide to the WhatsApp verification code scam explains the trick.

How do I know my WhatsApp has been hacked?

  • WhatsApp shows "Your phone number was registered with WhatsApp on a new device", and you've been logged out.
  • Friends tell you they've had odd messages from you, often asking for money or for a code.
  • You shared a 6-digit code that arrived by text, soon after someone asked for it.
  • There are devices under Linked devices that you don't recognise. WhatsApp says to check your linked devices regularly.

How do I get my WhatsApp account back?

WhatsApp's recovery steps, on the phone that has your SIM card:

  1. Open WhatsApp and tap Log back in, then Continue.
  2. If asked, enter your full phone number with the country code and tap Next, then OK.
  3. Enter the 6-digit code WhatsApp sends you by text or phone call.

WhatsApp says that when you re-register with the 6-digit code, every device logged in to your account is logged out automatically. It also says someone who re-registers your account on another phone can't read your past conversations, because messages are end-to-end encrypted and stored on your device.

If you see "Your phone number was registered with WhatsApp on a new device", WhatsApp's advice is the same: tap Log back in and follow the steps.

What if it asks for a two-step verification PIN I didn't set?

WhatsApp says that in rare cases, someone using your account may have turned on two-step verification. If you don't know the PIN, wait 7 days and try again. It adds that whether you know the PIN or not, anyone using your account is logged out as soon as you enter the 6-digit code from the text.

What if my phone was lost or stolen?

WhatsApp says you can't recover an account without a SIM card with the same phone number. Call your mobile provider as soon as possible, ask them to block the SIM, get a new SIM with the same number, then open WhatsApp and register again. The lost phone is logged out when you do.

Will changing my password get the hacker out?

No. WhatsApp says changing your password won't remove someone else from your account. Passwords, two-step verification and its other security features protect an account you still have access to. If someone else has taken over your account, the only way to remove them is to re-register with the 6-digit code sent to your phone number.

Should I report my own account to WhatsApp?

Not first. WhatsApp warns that if you report the compromised account you're trying to recover, it might ban it, and you could lose access to the account and your data. It recommends trying to recover your account before reporting it.

If someone is using your name or photo on a different number, report and block that number. WhatsApp says it may ban accounts that pretend to be someone else to scam people.

What do I tell my friends and family?

WhatsApp says to tell family and friends if you think someone else is using your account, because that person could impersonate you in chats and groups. Use a text, a call or another app, since your WhatsApp may not be under your control yet. Keep it short:

  • Your WhatsApp was taken over on a given day.
  • Any request for money or for a code from your account was not you.
  • Don't send a code to anyone who asks for one.

If anyone has already sent money, they should call their bank straight away on 159, which connects to their own bank, and report it to Report Fraud at reportfraud.police.uk (opens in a new tab) or on 0300 123 2040. In Scotland, call Police Scotland on 101.

How do I stop it happening again?

Once you're back in, WhatsApp recommends turning on its security features and checking your linked devices.

  1. Turn on two-step verification. On an iPhone, in WhatsApp tap You > Account > Two-step verification. On Android, tap the three dots, then Settings > Account > Two-step verification. Turn it on and create a strong password. WhatsApp is replacing the old 6-digit PIN with a password. It asks for an email address you can access, which you can skip, but it's worth adding.
  2. Check Linked devices. On an iPhone, tap Settings (or your profile picture), then Linked Devices. On Android, tap the three dots, then Linked devices. Tap any device you don't recognise and tap Log out.
  3. Add an email address to your account. WhatsApp says this gives you a way to recover your account without needing a text or a phone call.
  4. Never share your 6-digit registration code with anyone, not even friends or family. WhatsApp says this in its own recovery guide.

What if I can't get my account back?

  • The code isn't arriving: check you still have the SIM with the number the account uses. WhatsApp says an account can only be registered to one phone number at a time.
  • You changed number without moving WhatsApp over: WhatsApp warns you can permanently lose the account if you don't use its change number feature.
  • WhatsApp can't tell you who got in. It says it can't provide information about who accessed your account, or when and where.

If this came with a lost or strange-acting phone, see is my phone hacked?. If your email was taken over too, deal with that first: see email account hacked? What to do now.

Common questions

How do I get my hacked WhatsApp account back?

Open WhatsApp on the phone with your SIM card, tap Log back in, then Continue, and enter the 6-digit code WhatsApp sends by text or call. WhatsApp says re-registering with that code logs out every other device using your account. Don't share the code with anyone.

Will changing my WhatsApp password remove the hacker?

No. WhatsApp says changing your password won't remove someone else from your account. The only way to remove them is to re-register your account with the 6-digit code sent to your phone number. Turn on two-step verification after you're back in.

WhatsApp is asking for a PIN I never set. What do I do?

WhatsApp says the person using your account may have turned on two-step verification. If you don't know the PIN, wait 7 days and try again. Anyone using your account is still logged out as soon as you enter the 6-digit code from the text.

Can the hacker read my old WhatsApp messages?

WhatsApp says that someone re-registering your account on a new device can't read your past conversations, because messages are end-to-end encrypted and stored on your device. They can see and send new messages while they control the account, which is why you should warn your contacts.

Should I report my hacked WhatsApp account?

Recover it first. WhatsApp warns that reporting the compromised account you're trying to recover might get it banned, and you could lose access to your account or data. Report and block any other number that is pretending to be you.

Sources

Last checked: 25 September 2026

More on security

  • SecurityUrgent help

    Email account hacked? What to do now

    Whoever controls your email can reset the passwords on your other accounts. Here is how to get back in, find what the hacker changed and lock it down.

    Last checked 25 September 2026